Lucene search

[email protected]CVE-2011-1770

HistoryJun 24, 2011 - 8:55 p.m.

CVE-2011-1770

2011-06-2420:55:00

CWE-191

[email protected]

web.nvd.nist.gov

cve-2011-1770

integer underflow

dccp_parse_options

linux kernel

2.6.33.14

datagram congestion control protocol

dccp

buffer over-read

nvd

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.029 Low

EPSS

Percentile

90.6%

JSON

Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt2.6.33.14
fedoraproject:fedorafedoraproject fedoraeq15
fedoraproject:fedorafedoraproject fedoraeq14